Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/zuotDs4cXEMu6lF_J-1Nq7Bg3r0.roa
File: zuotDs4cXEMu6lF_J-1Nq7Bg3r0.roa (raw, json)
Hash identifier: VYwh+0eQiVdEoNxS6QrAMhXbmxi9du0vjhYKJUNCyuc=
Subject key identifier: CE:EA:2D:0E:CE:1C:5C:43:2E:EA:51:7F:27:ED:4D:AB:B0:60:DE:BD
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A608B5E
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/zuotDs4cXEMu6lF_J-1Nq7Bg3r0.roa
Signing time: Sun 17 Apr 2022 08:33:59 +0000
ROA not before: Sun 17 Apr 2022 08:33:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.116.115.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
89.117.87.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
89.116.100.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174099294 (0xa608b5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 17 08:33:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ceea2d0ece1c5c432eea517f27ed4dabb060debd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:bb:23:ed:6f:17:22:49:5e:5d:d4:c5:2e:
10:27:16:a4:9d:2a:b5:7a:de:04:94:0c:13:fb:31:
8b:0a:5f:49:85:c5:d6:21:4a:50:f1:5a:f6:68:2a:
0c:f8:93:e5:1d:df:6f:1e:7d:eb:63:0a:9c:2e:87:
1e:3d:60:ef:aa:43:2f:93:36:23:d1:e4:12:ae:bf:
a7:a8:e2:81:d1:28:7d:2e:90:7b:e2:de:3a:ee:ae:
03:cf:f6:27:13:53:9f:b6:60:4a:ac:52:4e:e5:c0:
be:1b:0a:bf:42:e9:b5:e5:19:63:6a:8a:58:ef:6d:
ac:f5:01:9f:a9:d1:b3:b2:6f:b7:1a:87:0f:d4:3d:
12:d1:ea:cc:00:74:0d:91:4e:00:b1:95:c8:8a:66:
45:d3:1a:10:15:d7:bf:e9:6f:b3:49:83:0b:22:f6:
3e:79:f6:09:08:d0:33:cb:62:ec:65:c5:c7:25:54:
2a:44:82:2b:10:cd:ea:32:7d:32:94:ac:58:50:e2:
9e:9d:26:22:a2:de:a1:6c:0f:87:65:bc:2b:b7:eb:
66:24:2a:b9:42:31:ae:32:cb:98:7a:ad:53:23:7e:
0c:60:2b:0c:8a:43:9a:d9:da:3d:1d:d1:b1:a0:70:
2e:91:f6:39:44:05:22:df:c2:20:2f:77:aa:b4:5e:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EA:2D:0E:CE:1C:5C:43:2E:EA:51:7F:27:ED:4D:AB:B0:60:DE:BD
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/zuotDs4cXEMu6lF_J-1Nq7Bg3r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.171.0/24
86.38.7.0/24
86.38.37.0/24
86.38.177.0/24
86.38.200.0/24
86.38.235.0/24
86.38.238.0/24
89.116.56.0/24
89.116.100.0/24
89.116.115.0/24
89.117.87.0/24
89.117.109.0/24
89.117.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:11:d1:9d:dc:ab:90:8e:92:f6:1c:3d:fc:88:08:cc:7f:b7:
9d:87:a0:88:a7:ab:70:1b:3b:42:aa:d3:e1:8c:6e:fd:96:c5:
50:12:9d:7b:4e:7e:e1:9d:2e:8f:24:d9:df:cc:11:b3:68:21:
86:ad:c9:5c:98:06:37:54:8e:0e:13:af:b5:cf:d5:8a:0c:ee:
8b:f6:1d:db:ae:f7:d6:90:80:21:0c:42:f2:bb:11:53:6b:21:
5c:d2:72:05:8c:26:ab:5f:e8:58:0e:58:77:6a:a7:e8:08:60:
71:dc:c2:29:6c:6e:29:47:67:b3:0c:c8:cf:81:ad:1e:af:d0:
13:66:be:30:92:8b:55:a4:e5:f4:64:e3:1d:92:be:d4:64:c9:
6a:9f:a3:d4:17:69:c9:0e:1c:52:ef:b2:57:48:56:41:0e:50:
9f:fe:4b:40:52:c6:03:45:26:db:83:ff:c5:5c:9c:87:1b:2c:
34:fd:07:5e:d8:8f:01:a9:cb:71:16:d3:56:8a:df:b6:df:64:
77:0b:2d:4b:e1:37:8d:d9:78:97:46:60:86:9c:23:51:4e:88:
f4:d3:bf:f1:1d:f1:c8:c8:06:ac:e3:21:85:2f:cd:c1:3c:f5:
c0:bf:65:44:6c:69:ad:1e:e3:28:5b:d9:65:72:d1:0a:0f:2d:
9c:2d:8a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org